Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64471

Bluetooth: btusb: fix use-after-free on registration failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < e09ac7d0c6859a360bf36e7104aef03f88184e0baffected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < 468fcdfaeb937163dd250773a9fed17ab1fa203caffected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < 1ce5012944afaddbda939ec6bae9800fce84abbcaffected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < e6313b800da61a26c2fdd5eba0105e197c0ab3bcaffected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < 14e02f1449ba425a44dedbec9a21efafb056e09faffected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < 8db0ce3de78367f61c2970c0f16d9adee8830a23affected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < da7d7758fe884b256ddc9fef562e5ddef7952383affected
  • 9bfa35fe422c74882e27cc54450a5f76c96aad68 to < eedc6867ebad73edbfaf9a0a65fbef7115cc4753affected

Linux Linux

Default version status: affected

  • 2.6.27affected
  • 0 to < 2.6.27unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References